Privacy Policy
Last updated: April 16, 2026
This Privacy Policy explains how FlowPilot collects, uses, and protects your personal and financial information — whether you use our platform as an individual or as part of a business.
1. Who We Are
FlowPilot is an AI-powered bulk payment platform designed for both individuals and businesses operating across Africa. We provide tools to automate, verify, and execute bulk payouts safely — from a freelancer paying a handful of contractors to an enterprise disbursing payroll at scale. We treat the privacy and security of your financial data as a foundational responsibility, not an afterthought.
2. Information We Collect
The data we collect depends on whether you use FlowPilot as an individual or as a business. In all cases, we only collect what is necessary to deliver our services and meet regulatory obligations.
For Individual Accounts
- Identity Information: Full legal name, date of birth, government-issued ID (NIN, BVN, or passport), and a selfie for identity verification.
- Contact Details: Email address and phone number used for account access and notifications.
- Financial Data: Bank account details, wallet balance, and payout history.
- Operational Logs: A record of every payout run you initiate, including recipient details and approval decisions.
For Business Accounts
- Entity Information: Business name, CAC registration number, tax identification number (TIN), and director or authorised signatory details.
- Operator Identities: Names, email addresses, and roles of team members granted platform access.
- Financial Data: Bank account details, wallet balances, and payout records linked to the business.
- Operational Logs: A complete audit trail of every supervised payout run, including goal definitions, AI agent actions, and approval history.
- Communication: Interactions between operators and the platform during the review and approval process.
For All Users
- Usage & Technical Data: Browser type, device information, IP address, login timestamps, feature usage, and API call logs.
- Beneficiary Data: Names and bank account details of recipients you add to a payout run. You are responsible for having lawful authority to process this information.
3. How We Use Your Information
We process your data to:
- Verify your identity and complete KYC/KYB requirements under applicable regulations.
- Operate and improve our bulk payment, reconciliation, and risk-scoring features.
- Execute payout runs on your instruction via our licensed payment infrastructure partners.
- Detect fraud, prevent money laundering, and enforce sanctions compliance.
- Send important service updates, transaction confirmations, and compliance notifications.
- Generate immutable audit reports for every completed payout run.
- Comply with legal and regulatory obligations under Nigerian law and applicable AML/CTF frameworks.
We do not sell your personal data or financial information to third parties, and we do not use your data to train third-party AI models.
4. Supervised AI & Data Processing
FlowPilot uses AI agents to automate verification, reconciliation, and risk scoring. These agents process your data under strict human supervision — no payout executes without your explicit approval. Your data is used exclusively within your account context to improve the accuracy of outputs for your specific runs. AI outputs are advisory and do not constitute financial or compliance advice.
5. Third-Party Integrations
FlowPilot integrates with licensed payment infrastructure providers to facilitate account verification and payout execution. Data shared with these partners is limited to what is strictly necessary to fulfil your payout instructions and is subject to their own security and compliance standards. We do not share your data with advertising networks, data brokers, or analytics platforms beyond standard, anonymised product analytics.
6. Security & Data Retention
All data is encrypted using AES-256 at rest and TLS 1.3 in transit. We enforce multi-factor authentication, role-based access controls, and continuous audit logging. Because FlowPilot is “audit-ready by default,” we maintain an immutable record of all payout activity for a minimum of 7 years to comply with Nigerian financial record-keeping regulations, or longer where required by applicable law.
7. Your Rights
Whether you are an individual or a business administrator, you have the right to:
- Access the personal data we hold about you.
- Correct inaccurate or outdated information.
- Export your operational logs and payout history.
- Request deletion of your account and associated data, subject to mandatory financial record-keeping obligations.
- Withdraw consent for optional data processing at any time.
To exercise any of these rights, contact us at privacy@flowpilot.ai. We will respond within 14 business days.
8. Cookies & Tracking
We use strictly necessary cookies to maintain your login session and platform security. We may also use anonymised analytics to understand how the platform is used and where to improve it. We do not use cookies for targeted advertising or cross-site tracking. You can manage cookie preferences through your browser settings, though disabling essential cookies will affect platform functionality.
9. Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. We will notify you of material changes via email or in-app notification at least 14 days before they take effect. Your continued use of the platform after the effective date constitutes acceptance of the revised policy.
Privacy & Security Contact
For privacy inquiries, data requests, or to report a security concern:
- Privacy: privacy@flowpilot.ai
- Security: security@flowpilot.ai